This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json) Hash identifier: Zxe9rY4XOSY0BWzpHsfPW+PKM9RwqDywLEPU8qKaaPQ= Subject key identifier: 96:EF:20:44:F5:16:C7:68:BC:10:2F:61:16:85:09:D3:22:17:DF:CD Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac Certificate serial: 019BF8083AC8F9189277483FFF230BF67FB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft Manifest number: 0BE2 Signing time: Mon 26 Jan 2026 02:00:47 +0000 Manifest this update: Mon 26 Jan 2026 02:00:47 +0000 Manifest next update: Tue 27 Jan 2026 02:00:47 +0000 Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: nXTZAlTjmAQ3G7dyHuY71pAmp0Qs+ybjxtdm4LkIKzI=) 2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:3a:c8:f9:18:92:77:48:3f:ff:23:0b:f6:7f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac Validity Not Before: Jan 26 02:00:47 2026 GMT Not After : Jan 27 02:00:47 2026 GMT Subject: CN=96ef2044f516c768bc102f61168509d32217dfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:5a:72:6a:58:a6:8e:ad:54:fd:67:57:aa: 33:bf:fc:88:d5:12:7d:63:ca:1f:03:5a:86:39:ac: a2:fb:38:8d:90:c2:0e:5c:4f:a2:6f:1e:79:91:e6: ef:f1:c2:65:c1:0f:f4:f1:9c:fc:a3:4d:50:3a:fd: ee:61:ff:a1:07:9e:5c:15:20:70:f6:ee:c3:b4:9c: 25:b8:d0:7b:fd:45:c1:3c:b4:48:15:5d:9f:1e:c5: 04:cd:59:99:94:a9:33:7b:3d:84:c9:64:5f:e1:56: ab:dc:13:5a:05:8f:06:2d:a2:71:69:64:5b:6f:33: 8a:1f:58:6c:73:5a:00:04:d5:68:58:c3:92:98:4e: e1:36:f0:d1:e1:06:7c:24:2a:1c:30:ae:43:94:c8: c4:5a:11:4b:f6:2e:69:e0:1a:b8:c3:96:88:fe:05: d8:a6:ee:f8:92:f3:05:17:19:f1:54:be:85:c4:60: 68:35:5c:30:ad:5c:45:c7:05:3a:bd:92:ab:7a:8a: 50:ef:ac:70:d1:33:e3:71:5c:31:46:0d:6d:69:c3: b1:a8:f3:03:fd:c4:6e:fd:f9:85:06:83:f9:82:33: 23:65:f9:60:d1:5c:61:47:00:39:58:79:1a:93:02: 3a:3f:d0:2d:b3:35:50:f2:9d:c3:b1:92:fd:f6:1f: c1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EF:20:44:F5:16:C7:68:BC:10:2F:61:16:85:09:D3:22:17:DF:CD X509v3 Authority Key Identifier: keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a9:71:5e:6d:40:35:ba:0a:4b:eb:af:6c:7f:e7:7e:42:b5: dd:73:ed:b6:84:1d:0b:bf:d8:70:ca:b9:54:1f:76:c2:9b:0e: 06:cc:4b:cb:5c:d3:49:44:12:3c:51:ad:40:96:f2:ea:11:3e: a1:46:04:d3:b7:a0:0e:0b:0f:cb:77:3a:55:da:b3:69:26:8c: c9:30:d1:05:65:d9:07:0f:38:49:32:70:15:b1:b8:b6:17:76: fc:8c:d4:61:a9:ee:6b:50:b3:cd:fd:ef:43:54:68:a7:dd:05: 03:fd:ee:76:6b:7b:d7:41:06:24:56:56:ba:dc:82:b9:31:d0: 30:4c:00:8d:50:e6:c1:ff:50:30:e2:74:bd:bf:49:97:34:6b: c0:54:a9:50:5e:2d:d6:6e:b6:4c:7f:e5:8a:78:f1:1a:d6:9a: e4:01:13:39:0e:6d:4c:9a:c7:9c:97:62:15:c6:03:20:5d:a7: 67:40:68:ff:3d:ca:0e:95:d2:d9:74:b3:c6:70:3e:a4:b1:9b: 3a:a8:1d:d8:18:ae:33:d0:e1:e8:83:87:6d:b5:14:51:96:95: 85:ca:f8:7e:fd:f3:34:be:e0:2e:c0:e0:4b:d8:82:fe:5f:d5: 58:17:5c:d7:bd:39:36:75:2b:32:02:69:58:53:bb:a8:c8:6d: 9b:66:a4:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CDrI+RiSd0g//yML9n+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey YjJhYWMwHhcNMjYwMTI2MDIwMDQ3WhcNMjYwMTI3MDIwMDQ3WjAzMTEwLwYDVQQD Eyg5NmVmMjA0NGY1MTZjNzY4YmMxMDJmNjExNjg1MDlkMzIyMTdkZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjBacmpYpo6tVP1nV6ozv/yI1RJ9 Y8ofA1qGOayi+ziNkMIOXE+ibx55kebv8cJlwQ/08Zz8o01QOv3uYf+hB55cFSBw 9u7DtJwluNB7/UXBPLRIFV2fHsUEzVmZlKkzez2EyWRf4Var3BNaBY8GLaJxaWRb bzOKH1hsc1oABNVoWMOSmE7hNvDR4QZ8JCocMK5DlMjEWhFL9i5p4Bq4w5aI/gXY pu74kvMFFxnxVL6FxGBoNVwwrVxFxwU6vZKreopQ76xw0TPjcVwxRg1tacOxqPMD /cRu/fmFBoP5gjMjZflg0VxhRwA5WHkakwI6P9AtszVQ8p3DsZL99h/BvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbvIET1FsdovBAvYRaFCdMiF9/NMB8GA1UdIwQY MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6lxXm1A NboKS+uvbH/nfkK13XPttoQdC7/YcMq5VB92wpsOBsxLy1zTSUQSPFGtQJby6hE+ oUYE07egDgsPy3c6VdqzaSaMyTDRBWXZBw84STJwFbG4thd2/IzUYanua1Czzf3v Q1Rop90FA/3udmt710EGJFZWutyCuTHQMEwAjVDmwf9QMOJ0vb9JlzRrwFSpUF4t 1m62TH/linjxGtaa5AETOQ5tTJrHnJdiFcYDIF2nZ0Bo/z3KDpXS2XSzxnA+pLGb Oqgd2BiuM9Dh6IOHbbUUUZaVhcr4fv3zNL7gLsDgS9iC/l/VWBdc1705NnUrMgJp WFO7qMhtm2akOw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:24 2026 by rpki-client